Notis vs Instinct (2026): The Viral AI Agent or the One That Works for You?

Instinct is the AI assistant everyone in tech is texting about. It books the trip, rings the restaurant that doesn't do online reservations, cancels the subscription you forgot. It is also invite-only, free, 14 people strong, and fresh off a $1 billion raise at a $10 billion valuation. So the real question behind "Notis vs Instinct" isn't which one is smarter. It's which one you want holding your keys, and who that assistant ultimately works for.

This comparison is built from Instinct's own homepage, privacy policy and terms, from reporting by TechCrunch, Business Insider and Fortune, and from Notis's public documentation. We haven't had hands-on access to Instinct (it's invite-only), so every claim about it links to a source you can check.

The short version

1. Instinct is best for people who want a do-everything errand runner and are comfortable handing over passwords, a payment card and a phone line to get it.
2. Notis is best for founders and operators who want an assistant inside the messaging apps they already use, with scoped app access, published pricing and no training on their data.
3. Neither yet if you can't name what you'd let an assistant do without asking you first. Decide that before you connect anything.

What Instinct actually is

Instinct describes itself as "a personal assistant that understands what you're working on and what's important to you". You text or call it. It "connects to your applications and devices - email, messaging, screen, audio, location, and more" and, in its own words, "it's trained to use a phone and a computer" (Instinct).

That last part matters. Instinct isn't just reading your stuff. It acts in the world with its own phone. Its Concierge feature places calls to businesses to book restaurants without online reservations, join a dentist's cancellation list or sort out a cable bill.

Under the hood it's run by Spear Street Technology, Inc. d/b/a Instinct, according to its privacy policy. Founder Noah Shinn, 23, was previously the first employee at Sierra, and the product remains invite-only while the company "was actively bringing up more compute", as Fortune reports.

People clearly love it. Shinn says it's approaching a billion dollars in annual transaction volume, with more than half of it travel (TechCrunch). It works because people give it a lot: "Three weeks in, there's a 40% chance that the user has shared a personal credit card with Instinct," Shinn said on Invest Like the Best (Moneywise). He also announced that 32% of users already share credentials through Instinct's Vault, alongside a 1Password partnership.

What Notis is

Notis is a messaging-native AI assistant. You talk to it on WhatsApp, Telegram, iMessage, Slack, email or the desktop app, and it does the work in the tools you connect: Notion, Gmail, Google Calendar, your CRM and 1,000+ other integrations. Your account is tied to your verified phone number, which acts as your authentication (Notis Help Center).

It's built by Mind The Flo S.à r.l., a small company registered in Morlon, Switzerland (privacy policy). We haven't raised venture capital. You pay for what you use, and that's the whole business model.

Notis vs Instinct at a glance

The business model question

Instinct is free. That's great, until you ask who pays for the compute behind a $10 billion valuation.

Shinn has been unusually open about it. According to Skift, he floated charging merchants a commission, pointing to boutique hotels that pay up to 30% per booking, while keeping the assistant free for travellers. He's also drawn a line: "I think it would be a very dangerous world if Instinct were influencing the user's behavior to purchase something that they don't want to purchase" (Business Insider via Moneywise).

I believe he means it. But intentions are not a business model. When an assistant earns more when you book the hotel that pays the fattest commission, every recommendation carries a question mark, even if nobody ever acts on it. And when roughly $1.35 billion of venture money is in the cap table (about $350 million raised by August, per Fortune, plus the $1 billion Series C from investors including Sequoia, Benchmark and Coatue), the people expecting a return on it get a say in where the take rate lands. That doesn't make anyone a villain. It means the user is one of several parties the roadmap answers to.

Notis's incentive is boring on purpose. You pay per task. We make money when the assistant is useful to you, not when you buy something through it.

Access: how much of your life does it need?

Instinct's appeal grows with access. Its privacy policy lists what it may handle: the content of your emails and messages, card details and billing address, "username and password for third-party accounts so that the personal assistant can sign into these accounts", audio, precise geolocation, and clickstream data including keystrokes (privacy policy).

Instinct has built real safeguards around the riskiest parts. The Vault stores logins, the 1Password integration keeps you from pasting passwords into chat, and its terms say Vault materials are only used to provide the service, not to train models (terms). On his podcast, Shinn said the current build "intercepts malicious content and reviews every action before execution" (Podcast Alpha notes).

Notis takes a narrower path by default. Integrations connect through OAuth via Composio, tokens are stored encrypted, and you can revoke any connection in Notis or at the provider (Help Center). To be fair, Notis also has a Cloud Computer with a browser agent that can keep logins for tasks you set up. The difference isn't that one can act and the other can't. It's what each one asks for on day one, and what it does with a phone line.

Security: what early users reported

No agent that reads untrusted email is immune to manipulation, Notis included. Prompt injection is an industry-wide, unsolved problem, and Instinct's own privacy policy warns about "interactions with third parties who may include misleading instructions intended to influence autonomous agents".

Still, the early reports are worth reading before you connect your inbox:

• TechCrunch collected tester complaints: an email sent without permission (Moxxie Ventures founder Katie Jacobs Stanton said "it had broken my trust"), emails summarized after an account was disconnected, and a demo of Instinct being phished.
• Business Insider reported that Instinct pulled a one-time login code from a user's Gmail without asking, then initially misdescribed how it got in. "If I can't trust its account of what it did, I can't give it access to anything that matters," said Veris AI CEO Mehdi Jamei.

Instinct has responded with fixes, including a Gmail deletion tool and a system Shinn says catches hallucinations before the agent acts. A fast-moving product will have early bugs. The point is the blast radius: the more an assistant holds, the more one bug costs. We go deeper in our guide to whether Instinct AI is safe.

Who is legally on the hook?

Read Instinct's terms before you hand it a card. You authorize the service to take actions "as the Services may deem are responsive to your Input", and you're responsible for "all consequences, whether financial, contractual, legal, reputational, or otherwise". Disputes go to binding individual arbitration with a class action waiver, unless you email an opt-out within 30 days of signing up.

None of that is unusual for a US startup. It's still worth knowing when the product you're signing up for can spend your money.

Choose Instinct if, choose Notis if

Choose Instinct if you have an invite, you want an errand runner that phones businesses and checks out for you, and you're comfortable with a free product whose revenue will come from the merchants it sends you to. Use a low-limit card, and turn off model training in settings.

Choose Notis if your work runs through messages and docs: capturing voice notes into Notion, triaging email, updating a CRM, running automations. You want a paid tool whose incentive is your time, data that never trains a model, and a company you can actually email. You can start free, and if you already pay for ChatGPT or Claude, Notis can run on that subscription.

Choose neither yet if you'd give an assistant your inbox before deciding what it may send without asking. Write that rule down first.

For a wider view, see our Instinct alternatives guide and the Instinct vs Meta Muse comparison.

Frequently asked questions

Is Instinct free?

Yes. Instinct is free for users and still invite-only. Founder Noah Shinn has said the goal is to keep it free and charge merchants a commission on transactions instead, according to Skift.

Does Instinct train AI models on my data?

By default, yes. Its terms let it use your materials to train AI models unless you opt out at app.instinct.com/settings. The opt-out applies going forward, and safety-flagged content may still be used. Vault materials are excluded.

Can Instinct make phone calls for me?

Yes. Instinct Concierge places calls to businesses, for example to book restaurants that don't take online reservations (TechCrunch). It's rolling out in early access.

What is the main difference between Notis and Instinct?

Instinct is a free, invite-only agent with its own phone and computer that takes over errands end to end. Notis is a paid, generally available assistant that works inside your messaging apps and connected tools, and never trains models on your data.

Is Notis available outside the US?

Yes. Notis is built in Switzerland and works worldwide on WhatsApp, Telegram, iMessage, Slack and email. Instinct is invite-only, and its calling feature is US-focused.

The verdict

Instinct is a genuinely impressive product, and the demand is real. But "free, viral and venture-backed" is a trade, not a gift: you pay with access, and someone else pays the bills. If you want the errand runner, go in with a low-limit card and training switched off. If you want an assistant whose only customer is you, that's the one we build.